Entitlement Explosion Repair
The video discusses how policy as code creates more flexible, adaptable access control compared to the rigidity of RBAC.
John Brothers from PACLabs joins Styra to share how to analyze roles and scopes, choose attributes, write policies, and roll out a successful migration.
Key topics covered include:
00:00 Opening
00:25 Why are you here?
01:13 Introducing Styra & PACLabs
02:18 Agenda for Entitlement Explosion Repair
05:20 Understanding conceptual roles
07:04 Example: NFL franchise conceptual roles
07:50 Identifying conceptual scopes
08:05 Example: Conceptual scopes in a local bank
09:08 Benefit of starting with simple roles and scopes
10:33 Pick the right application for roll out
11:40 Practice with low stakes and identify roles and scopes
12:21 Concrete scope of your house
15:27 Conceptual roles in a local bank
16:15 Bringing concrete attributes and policies together
22:52 Common questions - audits, testing, dev and support
27:10 Defining enterprise-grade policy as code
35:28 Summary and wrap-up